Register
The SIP Register section shows three tables - Active registered SIP users, Failed registrations and State changes in SIP registrations. Those tables are filled once you enable sip-register = yes in /etc/voipmonitor.conf.
By default PCAP files are not saved for SIP register messages (it can easily overload file system). If you need to record SIP messages you can control this in capture rules main section and here in all three sections there are gray/red small circles which indicates if SIP messages are being recorded to pcap file so it can be retrieved by clicking on PCAP link. Clicking on the circle enables / disables recording. In the dialog window you can adjust values and set auto remove for the rule at specific date.
Active table
The active table shows current registered users with this columns:
- ID/sensor id shows internal unique ID and if enabled sensor id
- datetime is time creation
- User name / realm shows username and realm from REGISTER message
- Source IP / Destination IP
- From / To / Contact are values from SIP headers
- Expires at shows date when the registration expires
- User agent
- Commands - download PCAP
On the picture below you can see a detail area where asub-grid with state changes and failed registrations from the user name is located. This holds quick filters for a particular active user where you can quickly see his history. Once the SIP registration is expired the history is no longer in the Active table . Each expired registration is stored in the State table.
